{"id":169249,"url":"https://alion.io/job/minfy-technologies-cloud-security-architect","title":"AWS Security Subject Matter Expert (SME)","company":{"id":59584,"name":"Minfy Technologies","domain":"minfytech.com","url":"https://alion.io/company/minfy-technologies","size_band":"201-500","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Keka","truth_index":{"grade":"B","score":84,"open_postings":20,"ghost_share":0,"stale_share":0.45,"repost_share":0,"time_to_fill_p50_days":68,"computed_at":"2026-10-17T05:46:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Delhi, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":37000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":43},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"Amazon SageMaker","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"FinOps","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS WAF","optional":true},{"name":"Platform Engineering","optional":true},{"name":"SLI/SLO/SLA","optional":true}],"status":"live","first_seen_at":"2026-08-14T05:36:00Z","employer_posted_date":"2026-08-14","last_verified_at":"2026-10-17T09:19:36Z","board_verified":true,"closed_at":null,"days_open":64,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":64},"description":"Job Description: AWS Security Subject Matter Expert (SME)\nRole Summary\nThe AWS Security Subject Matter Expert (SME) will serve as the go-to technical expert for security architecture, governance, compliance, and operational security posture across Minfy's AWS environments. This individual brings deep, hands-on expertise in AWS-native security services and best practices, advising on secure configurations, driving remediation of security gaps, enabling DevSecOps practices, and ensuring secure, compliant, and resilient AWS operations for both Minfy-managed and customer-managed environments.\nThe individual will work closely with SRE, Cloud Engineering, FinOps, Product Engineering, AI/ML teams, Customer Success, and Strategic Account teams, providing AWS security subject matter expertise to embed security into every aspect of cloud service delivery.\nKey Responsibilities\nAWS Security Architecture & Best Practices\nDefine and maintain enterprise security architecture standards for AWS, serving as the subject matter expert on AWS-native security services and configurations. \nDevelop secure AWS Landing Zones (AWS Control Tower, Organizations), reference architectures, and security guardrails. \nEstablish architecture patterns for: \nAWS multi-account/multi-region deployments \nHybrid cloud environments (AWS to on-premises) \nSaaS platforms \nAI/ML workloads (SageMaker, Bedrock) \nKubernetes platforms (Amazon EKS) \nReview and approve security designs for new cloud initiatives and customer engagements. \nDrive Zero Trust Architecture adoption across AWS environments. \n\nAWS Security Engineering & DevSecOps\nEmbed security controls into CI/CD and Infrastructure-as-Code pipelines. \nImplement Security-as-Code and Policy-as-Code frameworks. \nAutomate compliance validation and security posture assessments. \nEstablish secure software supply chain controls. \nDrive secure container, Kubernetes, and serverless security practices. \nIntegrate automated vulnerability and misconfiguration detection into engineering workflows. \n\nSecurity Operations & Threat Management\nDefine and oversee cloud security monitoring, detection, and response capabilities. \nEstablish AWS-native threat detection strategies using GuardDuty, Security Hub, and Detective. \nLead security incident response and forensic investigations. \nDrive vulnerability management programs across AWS environments (Amazon Inspector, ECR scanning). \nImplement cloud-native threat intelligence and proactive threat hunting capabilities. \nDevelop operational runbooks and security response automation. \n\nGovernance, Risk & Compliance\nDevelop cloud security governance frameworks and policies. \nEstablish cloud risk management and control assessment processes. \nLead compliance initiatives including: \nISO 27001 \nSOC 2 \nPCI DSS \nGDPR \nHIPAA \nNIST CSF \nCIS Benchmarks \nSupport customer security reviews and regulatory audits. \nBuild continuous compliance monitoring capabilities. \n\nIdentity, Access & Data Security\nDefine enterprise IAM strategy for AWS, including IAM, AWS Organizations, and AWS IAM Identity Center. \nImplement Zero Trust and least-privilege access models. \nStandardize: \nMFA \nSSO \nFederated Identity \nPrivileged Access Management \nLead secrets management (AWS Secrets Manager) and encryption strategy (AWS KMS). \nDefine enterprise data classification and protection controls. \n\nAI & Emerging Security\nSecure GenAI and AI/ML platforms deployed in cloud environments. \nEstablish governance controls for AI workloads. \nDefine security standards for LLM deployments and AI-assisted operations. \nAssess risks associated with AI services and third-party integrations. \nCollaborate with AI engineering teams to implement secure AI architectures. \n\nSME & Collaboration Responsibilities\nServe as the AWS security subject matter expert within the Cloud Security Center of Excellence in SRE. \nProvide technical guidance and mentorship to Cloud Security Engineers and Security Analysts on AWS best practices. \nPartner with Strategic Account Directors, TAMs, Cloud Architects, and Delivery Leaders. \nProvide technical reporting and recommendations on AWS security posture, risks, and remediation plans. \nSupport customer-facing security discussions and solution reviews.\n\nRequired Qualifications\n10-14+ years of experience in Infrastructure, Cloud, Security, or SRE domains. \nMinimum 6+ years of hands-on AWS security experience. \nDemonstrated depth as a go-to AWS security subject matter expert (team leadership experience not required). \nDeep, hands-on expertise across AWS security services (IAM, GuardDuty, Security Hub, KMS, Macie, Inspector, Control Tower, Organizations); working knowledge of Azure or GCP is a plus. \nStrong understanding of: \nCloud-native architectures \nKubernetes \nDevSecOps \nIdentity Security \nCompliance frameworks \nSecurity Operations \nExperience supporting enterprise-scale SaaS environments. \nStrong customer-facing and consulting capabilities. \n\nMandatory Technical Skills\nCandidates must demonstrate hands-on, working knowledge of the following:\nAWS Web Application Firewall (AWS WAF) \nAmazon Athena (for security log analytics and querying) \nAWS Security Hub \nAmazon GuardDuty \nAmazon Inspector \nCIS Benchmarks \nNIST Cybersecurity Framework (NIST CSF) \nISO 27001 \n\nPreferred Certifications\nAWS Certified Security - Specialty \nAWS Solutions Architect Professional \nAWS Certified Advanced Networking - Specialty \nAWS Certified DevOps Engineer - Professional \nCISSP \nCCSP \nCISM \nCKS (Certified Kubernetes Security Specialist)\n\nSuccess Metrics (KPIs)\nReduction in critical cloud security findings. \nCloud Security Posture Management (CSPM) score improvement. \nCompliance audit pass rates. \nSecurity incident reduction. \nMTTD and MTTR improvements. \nPercentage of infrastructure compliant by default. \nVulnerability remediation SLA adherence. \nCustomer security audit success rate. \nSecurity automation coverage across AWS environments. \n\nReporting Structure\nReports To: Delivery Leader\nManages: Individual contributor / SME role - no direct reports; provides technical guidance to Cloud Security Engineers, Security Analysts, DevSecOps Engineers, and Security Compliance Specialists\nThis role becomes the AWS security subject matter expert within the SRE organization, partnering with leaders for Cloud Operations, FinOps, Platform Engineering, Observability, and Automation to ensure secure and compliant operations across AWS customer environments.","description_format":"text","description_chars":6445,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":3,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Managed IT Services (MSP)","AI Consulting & Integration","Cloud Consulting & Migration","Data Engineering & Migration Services"],"lifecycle":[{"event":"open","at":"2026-08-29T21:18:52Z"}],"visa":[],"liveness":{"score":49,"band":"ok","label":"Likely open","p_open":1,"p_active":0.814,"p_room":0.6,"age_days":64,"expected_fill_days":68,"reasons":["conf:3","velocity","win:late","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/minfy-technologies-cloud-security-architect","json_url":"https://alion.io/job/minfy-technologies-cloud-security-architect.json","meta":{"generated_at":"2026-10-17T11:33:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15146,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":59584},"rest":"https://alion.io/mcp/rest/get_company?id=59584"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fminfy-technologies-cloud-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fminfy-technologies-cloud-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fminfy-technologies-cloud-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/minfy-technologies-cloud-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fminfy-technologies-cloud-security-architect"}]}